46a3cbd8291cfd841e74b127ed424944_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

46a3cbd8291cfd841e74b127ed424944_JaffaCakes118
Size

120KB
MD5

46a3cbd8291cfd841e74b127ed424944
SHA1

f80d1030a6cbe3142eccee77b657cc4a5a6372ab
SHA256

2e88a73ed8510c749cf4716b7c9d5ac5dc774bff663053c58b4de8e1b4d7c64c
SHA512

2de3767ce0a165e9a7e88a16e92290e684645523c711c77b6b3b02678aa6920a68c7c4a5c502a83ed3284bdd74f22005f3b0c2ec685b37c9210f8c203b5f1fcf
SSDEEP

1536:r8aZe6y5Xll1InbvdO6LyXGGvMljFsqChgCPBBoElqueww3QVnGMGB+O6ANN4l:r8aZefl41LbGvMlhsqCrrxl3y+O6Av4l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46a3cbd8291cfd841e74b127ed424944_JaffaCakes118

Files

46a3cbd8291cfd841e74b127ed424944_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c964a6496603488e88af5246dfead855

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

ReleaseStgMedium

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CompareStringA
CreateDirectoryA
CreateFileA
CreateFileW
CreateProcessA
DeleteCriticalSection
DeleteFileA
DeleteFileW
DosDateTimeToFileTime
EnterCriticalSection
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberFormatA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTempPathA
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
IsDBCSLeadByte
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
Sleep
SystemTimeToFileTime
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpynA
lstrcpynW

comctl32

ord8
CreatePropertySheetPageA
DestroyPropertySheetPage

gdi32

CreateFontA
CreatePen
CreateSolidBrush
DeleteObject
GetTextFaceA
GetTextMetricsA
Polygon
Polyline
SelectObject
SetBkColor
SetTextColor
TextOutA

shell32

DragQueryFileA
DragQueryFileW
SHGetPathFromIDListA

user32

BeginPaint
CharLowerA
CharLowerW
CharToOemA
CharUpperA
CharUpperW
CreatePopupMenu
EndPaint
EnumThreadWindows
GetClassNameA
GetClientRect
GetDC
GetDlgItem
GetDlgItemTextA
GetParent
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
InsertMenuItemA
InvalidateRect
LoadStringA
MessageBoxA
OemToCharA
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
wsprintfA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
___CPPdebugHook

Sections

.text
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c964a6496603488e88af5246dfead855

Headers

File Characteristics

Imports

ole32

advapi32

kernel32

comctl32

gdi32

shell32

user32

Exports

Exports

Sections

.text Size: 89KB - Virtual size: 92KB

.data Size: 13KB - Virtual size: 48KB

.tls Size: 512B - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 8KB

.text
Size: 89KB - Virtual size: 92KB

.data
Size: 13KB - Virtual size: 48KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 8KB